General

  • Target

    483a908dba24ae04106eb45b18ff7230N.exe

  • Size

    184KB

  • Sample

    240816-htznaa1fle

  • MD5

    483a908dba24ae04106eb45b18ff7230

  • SHA1

    11709997ab13666d4bf7919991ceb0629b80c314

  • SHA256

    046eba7fd7191009647a9685c35d449df0ebf26cb6bcd3e7b7d04fdbc8315b70

  • SHA512

    72b6fd44237cc833d9cba1e876e26f198f874bf64c75c8bcbaaca10c828ff61b4173afcdd7fe4fb343ba2094a977a0585f1d944f24da7774affe98c332ea49ec

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao+oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      483a908dba24ae04106eb45b18ff7230N.exe

    • Size

      184KB

    • MD5

      483a908dba24ae04106eb45b18ff7230

    • SHA1

      11709997ab13666d4bf7919991ceb0629b80c314

    • SHA256

      046eba7fd7191009647a9685c35d449df0ebf26cb6bcd3e7b7d04fdbc8315b70

    • SHA512

      72b6fd44237cc833d9cba1e876e26f198f874bf64c75c8bcbaaca10c828ff61b4173afcdd7fe4fb343ba2094a977a0585f1d944f24da7774affe98c332ea49ec

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao+oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks